$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS150279.roa File: AS150279.roa (raw, json) Hash identifier: breO8PmteTAcz5G8t7i0P3+e6cOwDBc80aU4rq3spTw= Subject key identifier: 48:6C:4E:1B:1A:CC:49:0A:29:14:BE:23:18:17:B4:6B:89:3D:2F:26 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6AE7F6AAE47C1712DB36D68C58D0538D2BC570D0 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150279.roa Signing time: Sat 02 May 2026 09:22:54 +0000 ROA not before: Sat 02 May 2026 09:17:54 +0000 ROA not after: Sat 01 May 2027 09:22:54 +0000 asID: 150279 IP address blocks: 157.20.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e7:f6:aa:e4:7c:17:12:db:36:d6:8c:58:d0:53:8d:2b:c5:70:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:54 2026 GMT Not After : May 1 09:22:54 2027 GMT Subject: CN=486C4E1B1ACC490A2914BE231817B46B893D2F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:99:d0:78:8d:d8:f8:e4:b6:c3:28:08:56:3c: 49:f9:2c:60:1e:79:01:ab:1d:97:11:84:6c:bc:4c: d9:ad:42:61:4f:80:cc:6a:84:c5:9c:fc:96:d2:4f: 75:7c:bd:a5:ea:f9:32:56:0a:fd:15:37:c6:91:a3: 9c:7b:a3:6e:a9:87:20:04:cd:cc:99:c1:fd:5f:9e: 18:da:43:22:02:e6:f9:0c:88:6b:ae:fe:6d:69:04: d5:d2:08:17:da:fa:c8:d2:a5:77:88:39:2f:a8:94: 8e:76:a6:a0:b9:1a:91:25:9a:13:fb:84:04:37:3b: a6:f2:de:8c:02:f1:5a:11:3b:dd:b3:d8:e8:e8:73: 90:16:1b:3b:b3:8a:fa:cd:5f:ec:e2:9a:83:b2:a1: 7d:1c:ea:a8:4d:52:88:d1:e5:52:88:df:45:ed:f4: cd:f7:ae:6e:84:84:2a:91:50:17:be:bb:d8:47:8b: 7a:7a:37:c3:b9:b7:14:26:7d:25:ba:0a:e8:53:e3: d9:48:07:75:3e:8f:86:ff:ce:11:a9:4d:53:f8:20: 1e:05:2b:38:e9:96:2c:43:1f:0d:73:c9:6c:34:20: a4:f1:8d:6a:34:6d:4d:13:8a:23:39:21:fc:b0:ca: bd:03:78:35:c5:49:87:e4:fb:b1:d8:8a:37:fa:f1: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6C:4E:1B:1A:CC:49:0A:29:14:BE:23:18:17:B4:6B:89:3D:2F:26 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150279.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.144.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:e1:9c:45:c6:1c:cf:a6:bd:07:bc:55:da:0b:85:fc:f3:f4: b9:28:3b:07:9b:d6:86:ff:96:5f:40:2a:83:10:b0:c8:c1:37: 9c:d8:f9:54:ea:f7:84:90:8d:5b:85:5d:87:07:e9:fc:69:e2: 5e:d6:e9:95:f3:58:19:a7:0e:c6:6c:d6:50:7d:4e:f8:51:e9: 99:e2:01:e6:f8:c6:f9:9e:1d:1f:76:2f:fa:3c:56:c8:de:8f: e1:2b:4e:c5:88:eb:3d:f9:15:67:0a:13:ed:03:e7:67:44:c0: ce:65:79:65:91:f9:6b:f4:87:ba:37:fa:cf:2d:47:5e:8e:39: 64:81:e4:ef:6f:c5:0e:49:f0:b7:ec:d6:62:69:e7:18:43:3c: be:19:f4:74:27:98:42:65:8c:c7:65:1a:35:cc:c6:d5:86:7c: 2a:2d:8f:71:4d:f5:b0:4f:a8:9a:ed:44:a4:95:1c:68:69:00: ea:32:95:8d:44:66:ed:d4:8d:c2:1b:49:26:45:94:09:8c:ac: 6b:e3:5a:1d:08:43:14:bd:09:e1:25:f5:07:2f:03:f3:a2:b3: 0f:26:0f:fb:dd:35:d9:24:de:a8:34:ab:cf:4a:f5:d2:25:65: 4c:57:e2:ed:4d:b2:9b:ab:a8:8d:af:bb:d1:c1:45:d2:55:b6: e4:2d:fb:16 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUauf2quR8FxLbNtaMWNBTjSvFcNAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc1NFoX DTI3MDUwMTA5MjI1NFowMzExMC8GA1UEAxMoNDg2QzRFMUIxQUNDNDkwQTI5MTRC RTIzMTgxN0I0NkI4OTNEMkYyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI+Z0HiN2PjktsMoCFY8SfksYB55AasdlxGEbLxM2a1CYU+AzGqExZz8ltJP dXy9per5MlYK/RU3xpGjnHujbqmHIATNzJnB/V+eGNpDIgLm+QyIa67+bWkE1dII F9r6yNKld4g5L6iUjnamoLkakSWaE/uEBDc7pvLejALxWhE73bPY6OhzkBYbO7OK +s1f7OKag7KhfRzqqE1SiNHlUojfRe30zfeuboSEKpFQF7672EeLeno3w7m3FCZ9 JboK6FPj2UgHdT6Phv/OEalNU/ggHgUrOOmWLEMfDXPJbDQgpPGNajRtTROKIzkh /LDKvQN4NcVJh+T7sdiKN/rx8hkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRIbE4b GsxJCikUviMYF7RriT0vJjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUwMjc5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAnRSQMA0GCSqGSIb3DQEBCwUAA4IBAQCb4ZxFxhzPpr0HvFXaC4X88/S5 KDsHm9aG/5ZfQCqDELDIwTec2PlU6veEkI1bhV2HB+n8aeJe1umV81gZpw7GbNZQ fU74UemZ4gHm+Mb5nh0fdi/6PFbI3o/hK07FiOs9+RVnChPtA+dnRMDOZXllkflr 9Ie6N/rPLUdejjlkgeTvb8UOSfC37NZiaecYQzy+GfR0J5hCZYzHZRo1zMbVhnwq LY9xTfWwT6ia7USklRxoaQDqMpWNRGbt1I3CG0kmRZQJjKxr41odCEMUvQnhJfUH LwPzorMPJg/73TXZJN6oNKvPSvXSJWVMV+LtTbKbq6iNr7vRwUXSVbbkLfsW -----END CERTIFICATE-----Generated at Sat May 2 21:06:04 2026 by rpki-client